centos7下nginx的安装和https配置多端口访问

1、首先检查是否安装了pcre，openssl，gzip等

[root@iZ286yyopd3Z nginx]# rpm -qa | grep "pcre"

pcre-8.32-15.el7.x86_64

pcre-devel-8.32-15.el7.x86_64

[root@iZ286yyopd3Z nginx]# rpm -qa | grep "openssl"

openssl-1.0.1e-34.el7_0.7.x86_64

openssl-libs-1.0.1e-34.el7_0.7.x86_64

[root@iZ286yyopd3Z nginx]# rpm -qa | grep "gzip"

gzip-1.5-7.el7.x86_64

如上显示则为已安装，否则使用yum进行安装。命令分别是：

 yum install pcre*

 yum install openssl*

 yum install zlib 

 yum install zlib-devel

2、下载ngix

[root@iZ286yyopd3Z nginx]# wget http://nginx.org/download/nginx-1.9.9.tar.gz
--2017-07-15 16:16:05--  http://nginx.org/download/nginx-1.9.9.tar.gz

Resolving nginx.org (nginx.org)... 206.251.255.63, 95.211.80.227, 2606:7100:1:69::3f, ...

Connecting to nginx.org (nginx.org)|206.251.255.63|:80... connected.

HTTP request sent, awaiting response... 200 OK

Length: 887908 (867K) [application/octet-stream]

Saving to: ‘nginx-1.9.9.tar.gz’

100%[=================================================================================================================================>] 887,908     73.0KB/s   in 14s    

2017-07-15 16:16:19 (63.6 KB/s) - ‘nginx-1.9.9.tar.gz’ saved [887908/887908]

3、解压

root@iZ286yyopd3Z nginx]# tar -zxvf nginx-1.9.9.tar.gz 

4、安装

[root@iZ286yyopd3Z nginx-1.9.9]# ./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module && make && make install

5、启动

安装默认在usr/local/nginx  在该目录输入

[root@iZ286yyopd3Z nginx]# ./sbin/nginx

重启 ./sbin/nginx -s reload

查看

[root@iZ286yyopd3Z nginx]# ps -ef | grep nginx

root     16200     1  0 17:31 ?        00:00:00 nginx: master process ./sbin/nginx

nobody   16201 16200  0 17:31 ?        00:00:00 nginx: worker process

root     25771 24255  0 17:32 pts/1    00:00:00 grep --color=auto nginx

此时输入网址，可以在浏览器中看到



6、配置https

    找到nginx.conf文件，默认在usr/local/nginx/conf下，我的配置为

server {
listen       80;
#server_name  localhost;

listen       443 ssl;
server_name  wangchunze.top;

ssl                  on;
ssl_certificate      /etc/nginx/214197219570764.pem;
ssl_certificate_key  /etc/nginx/214197219570764.key;

ssl_session_timeout  5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#charset koi8-r;

#access_log  logs/host.access.log  main;

location / {
root   html;
index  index.html index.htm;
}

其中

ssl_certificate      /etc/nginx/214197219570764.pem;
ssl_certificate_key  /etc/nginx/214197219570764.key;

为证书和key，从阿里云购买后下载并上传到服务器即可。



7、多端口访问配置

  location /xxx{
proxy_pass http://wangchunze.top:30332/xxx; proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

这样当访问https://wangchunze.top/xxx的时候，请求会自动转发到http://wangchunze.top:30332/xxx